A fraud investigator is analyzing a network of e-commerce sites that all use the same payment processor. The sites have different domain names, but the payment processor account for each site lists a different business name. The investigator suspects they are all operated by the same person. Which combination of evidence would most strongly support this hypothesis?

The payment processor accounts share the same bank account number, and the domains share a common registrant email.

The sites all use the same website template.

The sites all have similar product descriptions.

The sites all have SSL certificates from the same issuer.

An investigator is mapping the business network of a target company. They have identified several suppliers, clients, and a parent company. Which technique would best reveal indirect relationships between these entities?

Look up each entity's domain WHOIS and compare registrant emails.

Search for each entity's name on social media to see if they follow each other.

Construct a link chart using shared officers, addresses, and phone numbers from corporate registries and public records.

Use a search engine to find news articles that mention two entities together.

An investigator is analyzing a business that accepts payments through a third-party processor. The investigator finds a tax ID number on an invoice. How can this tax ID be used to further the investigation?

Use the tax ID to log into the business's payment processor account.

Search public procurement databases and business registries for the tax ID to find other contracts or entities using it.

Use the tax ID to access the business's bank account details.

Submit the tax ID to a credit bureau to obtain a credit report.

When investigating a business's financial footprint, which of the following sources would be most useful for identifying the payment processor used by the business?

The business's employee reviews on Glassdoor

The business's checkout page or payment links

The business's LinkedIn company page

The business's physical storefront signage

When investigating a business's physical facilities, which of the following is a key piece of information to look for in public records?

The business's property tax records

The business's employee birthdays

The business's marketing slogan

The business's registered agent's favorite color

GIAC Open Source Intelligence (GOSI)

Domain 2Objective 2

Investigating Businesses GOSI Practice Questions (Page 8)

Part of the Target Investigation and Infrastructure Analysis domain, which makes up ~54% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~27–43 in this domain), expect 9–14 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here

11free pages

8concepts

Questions 36–40

36expert · hard
A fraud investigator is analyzing a network of e-commerce sites that all use the same payment processor. The sites have different domain names, but the payment processor account for each site lists a different business name. The investigator suspects they are all operated by the same person. Which combination of evidence would most strongly support this hypothesis?
Select an answer first
37application · medium
An investigator is mapping the business network of a target company. They have identified several suppliers, clients, and a parent company. Which technique would best reveal indirect relationships between these entities?
Select an answer first
38application · medium
An investigator is analyzing a business that accepts payments through a third-party processor. The investigator finds a tax ID number on an invoice. How can this tax ID be used to further the investigation?
Select an answer first
39foundation · easy
When investigating a business's financial footprint, which of the following sources would be most useful for identifying the payment processor used by the business?
Select an answer first
40foundation · easy
When investigating a business's physical facilities, which of the following is a key piece of information to look for in public records?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GOSI

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GOSI” is a trademark of its owner, used for identification only.